Evaluating ERM or GRC software? Get free Excel and Word RFP templates — 250+ requirements

Get the templates

Article 55(1)(d)

CurrentConditional timing

Maintain Adequate Cybersecurity for Systemic-Risk GPAI Models and Infrastructure

Applies to GPAI Provider; Systemic-Risk GPAI.

Actors
GPAI Provider
AI class
GPAI with Systemic Risk
Themes
Security & Resilience

Tracker Networks Guidance

Maintain an adequate level of cybersecurity protection for the systemic-risk GPAI model and its physical infrastructure.

Official text

Article 55(1)(d)Official source
(d) ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model.

Timing depends on the system

  • 2 Aug 2025 — GPAI model placed on the market on or after 2025-08-02
  • 2 Aug 2027 — GPAI model placed on the market before 2025-08-02

Suggested controls

Related risks

  • GPAI Cybersecurity Failure

    A systemic-risk GPAI model or supporting physical infrastructure may be compromised or manipulated.

Recognized by G2 as a Leader

Trusted by customers and rated highly across all categories

Article 55(1)(d): Maintain Adequate Cybersecurity for Systemic-Risk GPAI Models and Infrastructure | Tracker Networks